Data Protection Policy

1. Purpose

Asili Retreats values the privacy and security of our guests, staff, and partners. This Data Protection Policy sets out how we collect, use, store, and safeguard personal data in line with applicable data protection laws, including the Kenya Data Protection Act (2019) and, where relevant, the General Data Protection Regulation (GDPR).

2. Scope

This policy applies to:

• All guests and participants at Asili Retreats.
   

• All employees, contractors, volunteers, and partners handling personal data on behalf of Asili Retreats.
   

• All personal data collected through our website, booking systems, emails, forms, or in person.
   

3. Principles

Asili Retreats commits to the following data protection principles:

1. Lawfulness, fairness, and transparency – We process personal data lawfully and transparently.
    

2. Purpose limitation – Data is collected for specific, explicit, and legitimate purposes.
    

3. Data minimization – We only collect data that is necessary.
    

4. Accuracy – We keep personal data accurate and up to date.
    

5. Storage limitation – We retain data only for as long as necessary.
    

6. Integrity and confidentiality – We protect data with appropriate security measures.
    

4. Data Collected

We may collect the following types of personal data:

• Identification details: Name, contact number, email, postal address.
   

• Booking details: Retreat dates, accommodation preferences, payment details.
   

• Health and wellness information: Only where necessary (e.g., allergies, dietary restrictions, emergency contact details, or health conditions relevant to retreat participation).
   

Marketing preferences: Consent to receive newsletters, updates, or promotions.